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1. Topic 1, Contoso Ltd 


Overview 

General Overview 

Contoso, Ltd. is a national freight company in the United States. The company has 
15,000 employees. 


Physical Locations 
Contoso has a main office in Houston and 10 branch offices that each contains 1,000 
employees. 


Existing Environment 
Active Directory and Microsoft Exchange Server Environments Re 
The network contains an Active Directory forest named contoso. com The forest 
contains one root domain named contoso.com and 10 child ee All domain 
controllers run Windows Server 2019. 
The forest has Active Directory Certificate Services (AD c ebe Active Directory 
Federation Services (AD FS) deployed. = 
You have a hybrid deployment of Exchange Server 2019 and Microsoft Office 365. 
There are 2,000 user mailboxes in Exchange Onliné: 
Each office contains two domain controllers andfivo Mailbox servers. the main office 
also contains an Edge transport server. Ka 
The organization contains 100 public eo The folders contain 80 GB of content. 
All email messages sent to contoso. E are delivered to Exchange Online. All 
messages sent to on-premises mailak es are routed through the Edge Transport 
server. 
Advanced Threat Protection ax) is enabled and configured for the Office 365 
tenant. Pa 

* 
Network Infrastructures 
Each office connegis*directly to the Internet by using a local connection. The offices 
connect to each ether by using a WAN link. 


Requirements 

Planned Changes 

Contoso plans to implement the following changes: 

For all new users in the on-premises organization, provide an email address that 
uses the value of the Last Name attribute and the first two letters of the First Name 
attribute as a prefix. 

O Decommission the public folders and replace the folders with a Microsoft 265 
solution that maintains web access to the content. 


Technical Requirements 


Contoso identifies the following technical requirements: 

All email messages sent from a SMTP domain named adatum.com must never be 
identified as spam. 

Any solution to replace the public folders must include the ability to collaborate with 
shared calendars. 


Security Requirements 

Contoso identifies the following security requirements: 

The principle of least privilege must be applied to all users and permissions. 

All email messages sent from an SMTP domain named com to contoso.com must 
be encrypted. 

All users must be protected from accessing unsecure websites when they click on 
URLs embedded in email messages. © 

lf a user attempts to send an email message to a distribution groyp{hat contains 
more than 15 members by using Outlook, the user must receive e Warning before 


sending the message. 6. 


N= 
Problem statements Ê 
Recently, a user named HelpdeskUser1 erroneously cfeated several mailboxes. 
Helpdesk1user1 is a member of the Recipient Mangement management role group. 

e 
Users who have a mailbox in office 365 repggtthat it takes a long time for email 
messages containing attachments to be defivered. 


O 
Exhibit 4 


PC C:\WINDOWS\system32> get-inboundconnector | fl 


Runspaceld : 2692441d-0e8a-42ef -83f3-9bfOb6d6b 
Enabled : True 

ConnectorType : Partner 

ConnectorSource : Default 

Comment : 

SenderIPAddresses : {87.112.113.0/25} 

SenderDomains : {smtp:*.contoso.com;1} 
AssociatedAcceptedDomains 0 

Requirells : True 
RestrictDomainsTolIPAddresses : True 
RestrictDomainsToCertificate : False 

CloudServicesMailEnabled : False 

TreatMessagesAsInternal : False 

TlsSenderCertificateName : *.fabrikam.com 
DetectSenderIPBySkippingLastIP False 
DetectSenderIPBySkippingTheseIPs : {} 

DetectSenderIPRecipietList 92 i 

AdminDisp layName 

ExchangeVersion : 0.1 (8.0.535.0) 

Name : Contoso Inbound Secure Connector 


P 
You need to resolve the emaitWelivery delay issue. 
What should you do? gs 
A. From the Security & x ompliance admin center, modify the safe attachments policy 
B. From the Securit & Compliance admin center, create a supervision policy. 
C. From the Sons admin center in Exchange Online, modify the antimalware 
policy. G 
D. From the Exchange admin center in Exchange Online, modify the spam filter 
policy. 
Answer: A 
Explanation: 
References: https://docs.microsoft.com/en-us/office365/securitycompliance/dynamic- 
delivery-and- 
previewing 


2.You need to recommend a solution for the public folders that supports the planned 


changes and meets the technical requirements. 
What should you recommend? 

A. Microsoft SharePoint site mailboxes 

B. Office 365 groups 

C. Resource mailboxes 

D. Public folder replicas 

Answer: B 

Explanation: 

References: https://docs.microsoft.com/en-us/exchange/collaboration/public- 
folders/migrate-to-office- 

365-groups? 

view=exchserver-2019 


s 
G 


3. HO TSPOT a 

Use the drop-down menus to select the answer choice that coyfiplete each statement 
based on the information presented in the Exchange OnlingConnector exhibit. NOTE: 
Each correct selection is worth one point. 


from fabrikam.com, set (answer choice) to*, fabrikam.com. | AssociatedAccepetedDomains 
ConnectorSource 
SenderDomains 


When an email message is sent from fabrikam.com to an on-premises 
mailbox, the message will be sent (answer choice). | back to a sender in fabrikam.com 
to the Edge Transport server encrypted 
to the Edge Transport server unencrypted 


Answer: ig 


A 
To meet the security requirements for the email messages received [| [WF 


from fabrikam.com, set (answer choice) to +, fabrikam.com. |AssociatedAccepetedDomains 
ConnectorSource 


l SenderDomains, 


When an email message is sent from fabrikam.com to an on-premises 
mailbox, the message will be sent (answer choice). | back to a sender in fabrikam.com 


to the Edge Transport server encrypted 


— 1 7 — — —-—V 


to the Edge Transport server une nerypted 


Explanation: 
SenderDomains 
to the Edge Transport server encrypted 


4.You need to recommend an Office 365 solution that meets the technical 
requirements for email from adatum.com. 

Which two components should you recommend configuring from the Exchange admin 
center in Exchange Online? Each correct presents a complete solution. NOTE: Each 
correct selection is worth one point. 

A. DKIM signatures 

B. a spam filter 

C. a malware filter 

D. data loss prevention (DLP) policies 

E. a connection filter 


Answer: B,E 

Re 
Po 
5.You need to configure the Exchange organization to meet the security requirements 
for sending email messages to distribution groups. 3” 


Which cmdlet should you run? KO 


A. Set-OrganizationConfig & 
B. Set-DistributionGroup 0 
C. Set· Mailbox r 
D. New-PolicyipConfig 
Answer: A 
Explanation: E 

References: https://docs.microsoft. conyéfi-us/powershell/module/exchange/organizat 


on/set-organizationconfig? view exchreinge- -ps 


6.HOTSPOT G 

You need to configure the*nvironment to support the planned changes for email 
addresses. Ka 

How should you confplete the command? To answer, select the appropriate options in 
the answer aregsAOTE: Each correct selection is worth one point. 


-Name ‘’ UserMailboxes’’ 
Set-Mailbox 
Set-MailboxPlan 


Update-EmailAddressPolicy 
New-EmailAddressPolicy 


-RecipientFilter {(RecipientType -eq ‘UserMailbox’ ) } 
-EnabledEmailAddressTempates ‘*’ 


w 


SMTP.%S%2g@contoso.com 
SMTP.%g%2s@contoso.com 


SMTP.%d%2g@contoso.com 
SMTP.%2d%s@contoso.com 


Answer: a 
< 

oc 
-Name ‘’ UserMailboxes’’ 


Set-Mailbox 
Set-MailboxPlan 


Update-EmailAddressPolicy 
New-EmailAddressPolicy 


-RecipientFilter { (RecipientType -eq ‘UserMailbox’ ) } 
-EnabledEmailAddressTempates ‘`’ * 


SMTP.%S%2g@contoso.com 
SMTP.%g%2s@contoso.com 


SMTP.%d%2g@contoso.com 
SMTP.%2d%S@contoso.com 


Explanation: 

References: 
https://docs.microsoft.com/en-us/powershell/module/exchange/email-addresses-and- 
address-books/new-emailaddresspolicy?view=exchange-ps 
https://docs.microsoft.com/en-us/Exchange/email-addresses-and-address- 
books/email-address-policies/email-address-policies?view=exchserver-2019 


7.You need to recommend a solution that meets the security requirements for 
protecting users. 

What should you recommend? 

A. From the Security & Compliance admin center, create an ATP safe attachments 
policy. 

B. From the Exchange admin center in Exchange Online, create a spam filter policy. 
C. From the Security & Compliance admin center, create an ATP anti-phishing policy. 
D. From the Security & Compliance admin center, create an ATP Safe Links policy. 
Answer: D 

Explanation: 

All users must be protected from accessing unsecure websites when they click on 
URLs embedded in email messages. Re 
<$ 
Ra 
8.You must prevent HelpDeskUser1 from repeating the same state 
You need to identify which management role provided HelpBeskUser1 with the 
necessary permissions to make the mistake identified ine problem statement. 
Which two cmdlets should you run? Each correct answer presents part of the solution. 
A. Get-RoleGroup 

B. Get-ManagementRoleEntry 
C. Get-RoleGroupMember G 

D. Set-ManagementRole Assignment E 

E. Get-ManagementRole S 

Answer: B,D Pa 

Explanation: 

Reference: https://docs. microg anien -us/powershell/exchange/find-exchange- 
cmdlet-permissions?view= Fä ange-ps 


D 
À| 


9. Topic 2, Litware fic 
Ka 
Case Study * 
Overview 
Litware, Inc. is food service supplier in Europe. 


Physical Locations 

Litware has a main office in Paris and branch offices in Munich, London, Brussels, 
Vienna, and Rome. 

Each branch office has its own compliance officer. 


Existing Environment 
The network contains one Active Directory forest named litware.com. The forest 


contains a single Active Directory domain. Each office is configured as an Active 
Directory site. 


Each branch office is represented organizational unit (OU) in an OU named Offices in 
Active Directory. 


Each branch office has a special Administrators group that contains the delegated 
administrators for that office. Each Administrators group is named based on its 
location in a format of RegionalAdmins_Brussels, RegionalAdmins_Munich, 
RegionalAdmins_London, RegionalAdmins_Vienna and RegionalAdmins_Rome. 


Network Infrastructure 
Each office contains two domain controllers from the litware.com domain. All the 
domain controllers are configured as DNS servers. All client computéts connect only 
to the DNS servers in their respective office. 8 

All offices have a high-speed connection to the Internet. Each sflice connects to the 
Internet by using a VPN appliance. 


Each office has the following servers and client computers: 
One reverse proxy appliance 
One Microsoft Exchange Server 2019 server ce. 

One Windows Server Update Services (WS) Server 


Computers that run Windows 10 and hayè Microsoft Office 2019 installed. 
Ra 


The office in Brussels contains an Exchange Server 2016 server that has the Unified 
Messaging role installed and hosted voicemail configured. 

Mailboxes are hosted on all ill servers. Public folders are hosted only on 
an 

Exchange server in the main office. Litware uses a disjoint namespace to access the 
servers. L 

Each user has an arêhive mailbox. Archiving is configured to use the default settings. 
Exchange serviges are published to the internet by using a reverse proxy in each 
office. 

A full backup of Exchange is performed nightly. Incremental backups occur every six 
hours. 

All the users in the transport department connect to network resources by using a 
connection in the main office. 


Requirements 

Planned Changes 

Litware plans to implement the following changes: 

0 Implement calendar sharing to partner companies. 

‘| Implement a solution that prevents malware from being delivered to end users. 


Use personal archives to eliminate the need for PST files. 

Ensure the Brussels office and move all the users in the Brussels office to the main 
office. All the mailboxes in the Brussels office will be moved to a server in the main 
Office. 

O Implement a compliance solution to ensure that items deleted from public folders 
are retained. If an item in a public folder is modified, the original version of the item 
must be available. 


Technical Requirements 

Litware identifies the following technical requirements: 

0O Minimize administrative effort. 

Use the principle of least privilege. 

Ensure that junk email is deleted automatically after 14 days. < 

Ensure that sent items and deleted items are deleted automatically“after 30 days. 
Ensure that users in the customer service department can opep multiple mailboxes. 
Ensure that all the former Brussels office users always maingain access to hosted 
voicemail. 8 

Ensure that the staff in the IT department can manage.the email environment 
without and-user involvement. à 

Ensure that users cannot recover email messages that are deleted from the Junk 
Email folder and the Deleted Items. C 

O Ensure that if an email message has a spagi confidence level (SCL) of 3 or higher, 


the message automatically moves to the dink Email folder. 
G 


O 
Problem statements oY 


The transport department users report that accessing a public folder named 
TransportPF is sometimes ve Slow. 
Users in the customer servige department report that Microsoft Outlook sometimes 
hangs when many mailboxes are open. 

Oo 
You need to implemrént a solution to support the planned changes for the branch 
office administrators. 
What should yéu do? 
A. Assign the Mail Recipients role to the branch office administrators and use a 
default management scope. 
B. Assign the Mail Recipients role to the branch office administrators and create a 
custom management scope. 
C. Assign the Recipient Policies role to the branch office administrators and use a 
default management scope. 
D. Assign the Recipient Policies role to the branch office administrators and create a 
custom management scope. 
Answer: B 
Explanation: 


Ensure that the branch office administrators can configure the properties of the 
mailboxes in their respective offices only. 

Reference: https://docs.microsoft.com/en-us/exchange/mail-recipients-role- 
exchange-2013-help 


10.You need to recommend a solution to retain the items in the public folders. The 
solution must support the planned changes. 

What should you recommend? 

A. Create an Outlook rule that forwards all the items in each public folder to a 
compliance mailbox. 

B. Place an In-Place Hold on all the mailboxes of the public folders. 


C. Increase the frequency of the backups. <$ 
D. Modify the public folder permissions. e 
Answer: B oe 
Explanation: L 


References: https://docs.microsoft.com/en- -us/exchange/sqgtirity -and-compliance/in- 
place-and-litigation-holds#placingpublic-folders-on- “hold e 

Fa 

ry 

11.HOTSPOT F 
You need to implement a solution that meets ie technical requirements for the 
retention of junk email, sent items, and deleted items. 

What is the minimum number of eg ei policies and retention tags you should use? 
To answer, select the appropriate opti ns in the answer area. NOTE: Each correct 


selection is worth one point. 8 


Retention tags: 


Retention policies: 


Answer: 


Retention tags: 


Retention policies: 


N 


12. HOTSPOT 
You need to implement a solution to meet the technical requirements for the SCL. 


How should you complete the command? To answer, select the appropriate options in 
the answer area. 


Set-ContentFilterConfig -PoisonThreshold 
Set-MailboxDatabase -SCLJunkThreshold 


Set-OrganizationConfig -SCLRejectThreshold 
Set-transportServer -SCLQuarantineThreshold 


Answer: 
3 

Set-ContentFilterConfig -PoisonThreshold 
Set-MailboxDatabase -SCLJunkThreshold 
Set-OrganizationConfig -SCLRejectThreshold 
Set-transportServer -SCLQuarantineThreshold 

roe 
Explanation: Ss 


References: https://docs. microsoft.com/en-us/pqwershell/module/exchange/organizati 
on/set-organizationconfig? view=exchange-ps.* 

6. 
13.You need to configure the required Objects for the branch office administrators. 
What should you create for each asministrator? 

A. amanagement role assignmefit policy and a management role group 

B. a management role scopeand a management role assignment 

C. a management role scope and a management role group 

D. a management role atid a management role assignment policy 

Answer: C e 

Explanation: §* 

Reference: http8°//practical365.com/exchange-server/exchange-server-role-based- 
access-control-in-action/ 


14.HOTSPOT 
Your company named Contoso, Ltd. has a Microsoft Exchange Server 2019 
organization that contains the mailbox databases shown in the following table. 


CwaMe [Description 


Contains all the mailboxes for the managers 
at Contoso 


Contains all the mailboxes for the finance 


department of Contoso 


You need to assign an offline address book (OAB) named Managers to all the users 
in a group named Managers. 

How should you complete the PowerShell script? To answer, select jee appropriate 
options in the answer area. NOTE: Each correct selection is worth e point. 


Statements “Yes No 
For User1 to share contacts with the users at Fabrikam, a O O 
federation trust is required. 
User2 can share free/busy hours, subject, and location with C) 9 
the users at Contoso. 
User3 can share calendars with the users at Litware. O O 
< 
P 
P 
Answer: sv 
© 
o 
Statements Yes No 
For User1 to share contacts with the users at Fabrikam, a O Qı 


federation trust is required. 


User2 can share free/busy hours, subject, and location with Oi G. 
the users at Contoso. 


User3 can share calendars with the users at Litware. 


O! 
O 


15.You need to resolve the issue for the customer service department users. 
What should you modify? 

A. a transport rule 

B. the Send connector to the Internet 

C. the tarpit interval 

D. the global throttling policy 

Answer: D 


16.You need to implement a solution to support the planned changes for the helpdesk 


users. Re 

What should you do? s 

A. Assign the Recipient Policies role to the helpdesk users and atéfaut management 
scope Ka 

B. Assign the Mail Recipients role to the helpdesk users ag Use a default 
management scope e 

C. Assign the Mail Recipients role to the helpdesk users and create a custom 
management scope © 


D. Assign the Recipient Policies roles to the helpélesk users and create a custom 
management scope 
Answer: C 


17.You need to resolve the issue for the transport department users. 
What is the best way to achieye'the goal? More than one answer choice may achieve 
the goal. Select the 


9 
BEST answer. Na 
A. Move the public folder mailbox that contains TransportPF to a server in the main 
office. Ka 

B. Move TranspeefPF to a public folder mailbox hosted in the main office. 

C. Modify the default public folder mailbox for all the transport department users. 

D. Instruct the transport department users to add TransportPF to their Favorites list in 
Outlook. 

Answer: B 

Explanation: 

References: https://docs.microsoft.com/en-us/exchange/recipients/mailbox- 
moves?view=exchserver-2019 


18.You need to recommend a procedure for closing the Brussels office that meets the 
technical requirements. 


What should you recommend? 

A. In the main office, deploy an Exchange Server 2016 server that has the Unified 
Messaging role installed, and then move the mailboxes from the Brussels office to the 
new server. 

B. Deploy a Microsoft Skype for Business 2019 server to the main office, and then 
move the mailboxes from the Brussels office to an Exchange Server 2019 server in 
the main office. 

C. Implement a new mailbox database on an Exchange Server 2019 server in the 
main office, and then move the mailboxes from the Brussels office to the new mailbox 
database. 

D. Implement a new database availability group (DAG) that contains the server in the 
Brussels office and a new Exchange Server 2019 server in the main office, and then 
create a mailbox database copy on the new server in the main office. .» 


Answer: C Ss 
Explanation: oe 
References: 3” 
https://docs.microsoft.com/en- us/exchange/architecture/mgitbox- -servers/manage- 
mailbox-moves?view=exchserver-2019 ge 
https://theitbros.com/move-exchange-mailboxes-to- -anéther-database/ 
Ry 
880 
19. Topic 3, Fabrikam, Inc G 
ry 
G 


Case study 8 
This is a case study. Case studies age rot timed separately. You can use as much 
exam time as you would like to cofħplete each case. However, there may be 
additional case studies and segtions on this exam. You must manage your time to 
ensure that you are able to ei all questions included on this exam in the time 
provided. V 


> 
$ 


To answer the questions included in a case study, you will need to reference 
information that is provided in the case study. Case studies might contain exhibits and 
other resource€ that provide more information about the scenario that is described in 
the case study. Each question is independent of the other questions in this case 
study. 


At the end of this case study, a review screen will appear. This screen allows you to 
review your answers and to make changes before you move to the next section of the 
exam. After you begin a new section, you cannot return to this section. 


To start the case study 
To display the first question in this case study, click the Next button. Use the buttons 
in the left pane to explore the content of the case study before you answer the 


questions. Clicking these buttons displays information such as business 
requirements, existing environment, and problem statements. If the case study has an 
All Information tab, note that the information displayed is identical to the information 
displayed on the subsequent tabs. When you are ready to answer a question, click 
the Question button to return to the question. 


Overview 
Fabrikam, Inc. is a consulting company that has a main office in Montreal. 
Fabrikam has a partnership with a company named Litware, Inc. 


Existing Environment 

Network Environment 

The on-premises network of Fabrikam contains an Active Directory domain named 
S 


fabrikam.com. Ù 
Fabrikam has a Microsoft 365 tenant named fabrikam.com. All users have Microsoft 
365 Enterprise E5 licenses. | 
User accounts sync between Active Directory Domain Seryi es (AD DS) and the 
Microsoft 365 tenant. & 
Fabrikam.com contains the users and devices Shou the following table. 
W 
User name Department Device name Platform Device owned by 


* 
d 


C 
Fabrikam currently leases mobife devices from several mobile operators. 
* 

E 
Microsoft Exchange Onio Environment 
All users are assigned Outlook Web App policy named Files Policy. 
In-Place Archiving is disabled for Exchange Online. 
You have the ugets shown in the following table. 


Name Exchange Online role group 
Records Management 
Recipient Management 


Compliance Management 
Organization Management 


© 
User1 and User3 use Microsoft Outlook for iOS and Android to acces email from 
their mobile device. User2 uses a native Android email app. 8 

b 


& 
A Safe Links policy in Microsoft Defender for Office 365 is applied to the 
fabrikam.com tenant. The marketing department uses a pail-enabled public folder 


named FabrikamProject. oe 

Default MRM Policy is disabled for the fabrikam.cog*tenant. 
ie 

Problem Statements . 


Fabrikam identifies the following issues: s 

Users report that they receive phishing“emails containing embedded links. 
[| Users download and save ASPX fs when they use Outlook on the web. 
Email between Fabrikam and Litware is unencrypted during transit. 

User2 reports that he lost hisgfiobile device. 


Requirements a 
Planned Changes oe 
Fabrikam plans to implement the following changes: 

Configure FilegPolicy to prevent Outlook on the web users from downloading 
ttachments that have the ASPX extension. 

Purchase a new smartboard and configure the smartboard as a booking resource in 
Exchange Online. 

Ensure that the new smartboard can only be booked for a maximum of one hour. 
Allow only Admin1 to accept or deny booking requests for the new smartboard. 

O Standardize mobile device costs by moving to a single mobile device operator. 

‘| Migrate the FabrikamProject public folder to Microsoft SharePoint Online. 

Enable In-Place Archiving for users in the marketing department. 

Q Encrypt all email between Fabrikam and Litware. 


| © 


Technical Requirements 


Fabrikam identifies the following technical requirements: 

Ensure that the planned Sharepoint site for FabrikamProject only contains content 
that was created during the last 12 months. 

Ay existing file types that are currently configured as blocked or allowed in the 
FilesPolicy policy must remain intact. 

When users leave the company, remove their licenses and ensure that their mailbox 
is accessible to Admin and Admin. 

‘| Generate a report that identifies mobile devices and the mobile device operator of 
each device. 

Use the principle of least privilege. 

Q Minimize administrative effort. 


Retention requirements Re 

Fabrikam identifies the following retention requirements for all usergs® 

Enable users to tag items for deletion after one year. «č 

Enable users to tag items for deletion after two years. G 

Enable users to tag items to be archived after one year. „® 

Automatically delete items in the Junk Email folder after 30 days. 

‘| Automatically delete items in the Sent Items folder afler 300 days. 

Ensure that any items without a retention tag are HHV to the Archive mailbox two 
years after they were created and permanently 4 déleted seven years after they were 
created. 


HOTSPOT 8 
How many default policy tags (OPS retention policy tags (RPTs), and personal tags 
should you create to meet the retghtion requirements? To answer, select the 
appropriate options in the ansyér area. NOTE: Each correct selection is worth one 
point. 


Answer Area 


DPTs: 


RPTs: 


Personal tags: 


8 8 0 


G UNEO 


G 0 


Answer: 


Answer Area 


DPTs: 


RPTs: 


Personal tags: 


2 0 


NOU 0 


NOU e 


Explanation: 

Table 

Description automatically generated 

Box 1: 1 

Default Policy Tags apply to any item that doesn’t have another tag applied to it. 

We need one to meet the following requirement: 

Ensure that any items without a retention tag are moved to the Archive mailbox two 
years after they were created and permanently deleted seven years after they were 
created. 


Box 2: 2 
Retention Policy Tags apply to default mailbox folders (Inbox, Sent Items etc). 
We need two to meet the following requirements: E 


‘| Automatically delete items in the Junk Email folder after 30 da 

‘| Automatically delete items in the Sent Items folder after 300 Mays. 

Box 3: 3 KO 

Personal tags can be applied by users to custom folder Sr individual emails. 
We need three to meet the following requirements: a 

Enable users to tag items for deletion after one Bar. 

Enable users to tag items for deletion after tag years. 

Enable users to tag items to be archived after one year. 


20.HOTSPOT Eis 
You need to ensure that In-Place „Archiving is enabled for the marketing department 
users. K 

Which user should perform jhe change, and which tool should the user use? To 
answer, select the appropfiate options in the answer area. NOTE: Each correct 
selection is worth one point. 


User: 


Admin2 only 
Admin3 only 
Admini and Admin3 only 
Admin2 and Admin4 only 


Tool: 


Microsoft 365 admin center 
Microsoft 365 security center 
Microsoft 365 compliance center 


Answer: 


User: 


Admin2 only 
Admin3 only 
Admini and Admin3 only 
Admin2 and Admin4 only 


Tool: 


Microsoft 365 admin center 
Microsoft 365 security center 
Microsoft 365 compliance center 


Explanation: € 
Graphical user interface, text, apgieation 
Description automatically generated 

* 


č 
2 


21. Vou need to dentig ien users clicked the links in the phishing emails. 
What should you da? 

A. Runa message trace and review the results. 

B. Query the mailbox audit log. 

C. Use the URL trace reporting feature. 

D. Review the quarantine mailbox. 

Answer: C 

Explanation: 

Reference: https://docs.microsoft.com/en-us/powershell/module/exchange/get- 
maildetailatpreport? view=exchange-ps 


22.HOTSPOT 
You need to modify FilesPolicy to prevent users from downloading ASPX files. The 


solution must meet the technical requirements. 
How should you complete the command? To answer, select the appropriate options in 
the answer area. NOTE: Each correct selection is worth one point. 


y -id FilesPolicy -BlockedFileTypes 


Set-SafeLinksPolicy 
Set-OwaMailboxPolicy 


»aspx 

* aspx 

@{Add = . aspx“) 
Remove = “.aspx”} 


Set-ActiveSyncMailboxPolicy 
Set-HostedContentFilterPolicy 


Answer: 


y -id FilesPolicy -BlockedFileTypes 


Set-SafeLinksPolicy »aspx 
Set-OwaMailboxPolicy * .aspx 
Set-ActiveSyncMailboxPolicy @{Add = “.aspx”} 
Set-HostedContentFilterPolicy @{Remove = aspx“ 
g 
. ee 
Explanation: roe 
«Č 
Text oe 
Description automatically generated PS 
sd 
Xs) 
0 


23.You need to generate a report for the mobile devices that meets the technical 


requirements. „ 
Which PowerShell cmdlet should youtise? 
A. Get-DevicePolicy & 

B. Get-MobileDevice E 


C. Get- -MobileDeviceStatistigs" 

D. Get- DeviceTenantPoligy” 

Answer: B È 

Explanation: e 

Reference: https. -Hocs.microsoft.com/en- -us/powershell/module/exchange/get- 
mobiledevies w= =exchange-ps 


24.You need to encrypt email between Fabrikam and Litware to support the planned 
changes. 

What should you configure in the Exchange admin center? 

A. a connector 

B. an organization relationship 

C. a sharing policy 

D. a remote domain 

Answer: A 


Explanation: 

Reference: https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/use-c 
onnectors-to-configure-mail-flow/set-up-connectors-for-secure-mail-flow-with-a- 
partner 


25.HOTSPOT 
You need to perform a remote wipe of the devices of User2 and Users. 

You run the following commands. 

Clear-MobileDevice -id User2-Device 

-NotificationEmailAddress "admin@Fabrikam.com" 

Clear-MobileDevice -id User3-Device 

-NotificationEmailAddress "admin@Fabrikam.com" © 

What occurs on each device? To answer, select the appropriate options | in the answer 
area. NOTE: Each correct selection is worth one point. oe 

2 


N 


On the device of User. 


All data is deleted 


Only email messages are deleted. 
Only email messages and calendar, contact, and file data are deleted. 


On the device of User3: v 
All data is deleted. 
Only email messages are deleted. 
Only email messages and calendar, contact, and file data are deleted. 


Answer: 
On the device of User2: = v 
All data is deleted. 
Only email messages are deleted. 
Only email messages and calendar, contact, and file data are deleted. 
On the device of User3: v 
All data is deleted. 
Only email messages are deleted. 
Only email messages and calendar, contact, and file data are deleted. 
Explanation: 
Text 


Description automatically generated 


26.User3 leaves the company. 

You need to ensure that Admin and Admin can access the mailbox of User3. The 
solution must meet the technical requirements. 

What should you do? 

A. Migrate the mailbox of Users to a distribution group. 

B. Migrate the mailbox of User3 to a Microsoft 365 group. 

C. Convert the mailbox of User3 into a resource mailbox. 

D. Convert the mailbox of User3 into a shared mailbox. 

Answer: D 

Explanation: 

Fabrikam identifies the following technical requirements: 

O When users leave the company, remove their licenses and ensure that their mailbox 
is accessible to Admin and Admin. © 

If you remove the license from User3, the mailbox will be deleted afte. 30 days. 
Converting the mailbox to a shared mailbox will ensure that the Mailbox is not 
deleted. You would still need to give Admin1 and Admin2 perigissions to access the 
mailbox. KO 

Reference: https://docs.microsoft.com/en-us/microsoft-388/admin/email/convert-user- 
mailbox-to-shared-mailbox?view=0365-worldwide Ka 

W 


2 
& 
„© 


27.You need to identify the contents of the FabrikamProject public folder to meet the 
technical requirements. 

Which PowerShell cmdlet should you wit? 

A. Get-PublicFolderScaciscics RA 

B. Get- PublicFolderltemStatistics,s* 

C. Get- ‘PublicFolderMailboxDigghoscies 


D. Get-PublicFolder E 
Answer: B xy 
Explanation: Ka 


Reference: https: lids. microsoft.com/en-us/powershell/module/exchange/get- 
publicfolderitemstatistics ?view= exchange-ps 
aS 


28.HOTSPOT 

You need to configure the new smartboard to support the planned changes. 

Which three settings should you configure? To answer, select the appropriate settings 
in the answer area. NOTE: Each correct selection is worth one point. 


Booking options 
Assign settings for the booking policy that defines when this 
resource can be scheduled 


o Allow repeating meetings 


o Allow scheduling only during work hours 


g Auto-accepts meeting request 


Set to "Off" if you want to specify users who want to accept 
meetings manually 


Booking delegates 


Search a mail or email 


g Automatically decline meetings outside of limits below 


Booking window (days) 


Maximum duration (hours) 


If the organizer needs a reply enter message below 


Answer: 


Booking options 
Assign settings for the booking policy that defines when this 
resource can be scheduled 


Allow repeating meetings 
o Allow scheduling only during work hours 


O Auto-accepts meeting request 


Set to "Off" if you want to specify users who want to accept 
meetings manually 


If the organizer needs a reply enter message below 


Explanation: 
Graphical user interface, text, application, email 
Description automatically generated 


29. Topic 4, ADatum Corporation 


Case study 

This is a case study. Case studies are not timed separately. You can use as much 
exam time as you would like to complete each case. However, there may be 
additional case studies and sections on this exam. You must manage your time to 
ensure that you are able to complete all questions included on this exam in the time 
provided. 


To answer the questions included in a case study, you will need to reference 
information that is provided in the case study. Case studies might contain exhibits and 
other resources that provide more information about the scenario thaf is described in 
the case study. Each question is independent of the other questjgs in this case 
study. | 


<% 


Y 
At the end of this case study, a review screen will appegꝝ This screen allows you to 
. K ; 
review your answers and to make changes before youmove to the next section of the 


exam. After you begin a new section, you cannot return to this section. 


A 
O 
N 

e 


To start the case study G 


To display the first question in this case stydy, click the Next button. Use the buttons 
in the left pane to explore the content atthe case study before you answer the 
questions. Clicking these buttons digptays information such as business 
requirements, existing environmest, and problem statements. If the case study has an 
All Information tab, note that tie information displayed is identical to the information 
displayed on the subsequenftabs. When you are ready to answer a question, click 
the Question button to regain to the question. 

Oo 
Overview ee 
Company information 
Datum Corpofation is a consulting company that has a main office in Montreal. 
ADatum has a Microsoft 365 E5 tenant named adatum.com and uses Microsoft 
Exchange Online for messaging services. 


Existing Environment 
Mailboxes 


po 


DISPLAY NAME a| MAILBOX TYPE 


Administrator 
Alex Wilber 
Allan Deyoung 
Diego Siciliani 
Isaiah Langer 
Joni Sherman 
Lynne Robbins 
Megan Bowen 
Nestor Wilke 


Patti Fernandez 


User (Archive) 
User (Archive) 
User (Archive) 
User (Archive) 
User (Archive) 
User (Archive) 
User (Archive) 
User (Archive) 
User (Archive) 
User (Archive) 


Public Folder Mailboxes 


public folder mailboxes 


DEPARTMENT 


Marketing 


| OUTLOOK WEB APP POLICY 


OwaMailboxPolicy-Default 
Policy! 
OwaMailboxPolicy-Default 
OwaMailboxPolicy-Default 
Policy! 
OwaMailboxPolicy-Default 
Policy 
Policy2 
Policy1 
Policy2 


EXCHANGE ACTIVESYNC POLICY 


Default 
Marketing Policy 
Default 

Default 

Sales Policy 
Default 

Sales Policy 
Marketing Policy 
Sales Policy 
Marketing Policy 


If you plan to migrate your on-premises public folders to the cloud, use PowerShell to create sufficient public folder 
mailboxes. After the migration, Microsoft will manage your public folder mailboxes. If you don’t already have public 
folders, you can use this tab to create the first public folder mailbox and Microsoft will manage the rest. Learn more 


170 


Rules 


Rules 


+- L wbite g- AS 


ON 


Connectors 


RULE 


PRIORITY 


There are no items to show in this view. 


Connectors Stell fow scenario 


From Office 365 


Connectors help contro! the flow of email messages to and To: Partner organization 
recommend that you first check to see if you should create 


+ Addaconnetor fl) Delete C) Refresh 


O Status 7 Name 


o On Contoso Connector Edit name or statut 


Use of connector 
Use only when I have a transport cue set up that redirects messages to thes connector, 
Edit use 


Routing 
Use the MX record associated with the partners domain. 
Edit use 


Security restrictions 


Always use Transport Layer Security (TLS) and connect only if the recipient's email server 
has a digital certificate. 


Safe Attachments Policies 


Policies & rules > Threat policies > Safe attachments 


Set up an safe attachments policy for specific users or groups to help prevent people from opening 
or sharing email attachments that contain malicious content. Learn more about safe attachments for 
email 


+1090 sitems | P search | 


Name 


Safe Attachments 1 


Safe Attachments 2 


Safe Attachments 3 


Safe Attachments 1 
policy on | Priority O 
U Turn off | J Decrease Priority 


Edit description 
Users and domains 


included groups 
Group! 


Edit users and domains 


Settings 
Safe Attachments detection response: 


® Monitor - Deliver the message if malware is detected and track scanning 
results. 


Redirect attachments: 
® Disabled 


Edit settings 


Close 


Safe Attachments 2 
policy on | Priority 1 
U Turn off Increase Priority J Decrease Priority 


Edit description 
Users and domains 


included groups 
Group2 


Edit users and domains 
Settings 
Safe Attachments detection response: 


è Block - Block current and future messages and attachments with detected 
malware. 


Redirect attachments: 
e Disabled 


Edit settings 


Close 


Groups 


DISPLAY NAME ^ GROUP TYPE STATUS 


Adatum Microsoft 365 Active 
All Company Microsoft 365 Active 


Group1 Distribution list Active 
Group2 Mail-enabled security Active 
Group3 Dynamic distribution list Active 
Group4 Microsoft 365 Active 


Group Membership 


Group! 


general Members: 

ownership he 
membership Administrator 

membership approval Alex Wilber 


delivery management Diego Siciliani 
Joni Sherman 


message approval 
email options 
MailTip 

group delegation 


Group2 


general 

ownership 
membership 

membership approval 

delivery management 

message approval 

email options 

MailTip 

group delegation 


Members: 
“fe = 


Administrator 
Lynne Robbins 
Megan Bowen 
Nestor Wilke 
Patti Fernandez 


Group3 


general 

ownership 
membership 

membership approval 

delivery management 

group delegation 


Members: 
*Specify the types of recipients that will the member of 
this group. 
O All recipient types 
© Only the following recipient types: 
@ Users with Exchange mailboxes 
O Mail users with external email addresses 
O Resource mailboxes 
O Mail contacts with external email addresses 


Mail- enabled groups 


Membership in this group will be determined by the 
rules you set up below. 


x Department v ‘Sales’ 
add a rule 


Group4 


general Members: 
ownership + = 
membership Administrator 
membership approval Alex Wilber 
delivery management Diego Siciliani 


; Isaiah Langer 
group delegation Une oben 


Megan Bowen 
patti Fernandez 


Cancel 


Contacts S 


4 58 
DISPLAY NAME CONTACT TYPE EXTERNAL EMAIL ADDRESS 


Contact1 Mail contact SMTP. Contact1@fabrikam.com 
Contact2 Mail user SMTP. Contact2@Outlook.com 
Contact3 Mail user SMTP. Contact3@hotmail.com 


Allan Deyoung Role Assignments and Mailbox Details 


EM Adminstrator. Windows PowerShell 


PS C\Users\Administrator ADATUM> t-M ' t -GetEffectiv ers | V t(S €ffectiveUserName 


t Role 


View-Only Configuration 
View-Only Recipients 
Transport Hygiene 


i 


PS CAUsers\ Administrator ADATUM> Get-M allandiselect E- 


EndDateForRetentionHold 
EkcProcessingDisabled 
ExchangeGuid 
ExchangeSecuntyDescriptor 
ExchangeUserAccountContro! 
ExternalOofOptions 
EffectivePublicFoiderMailbox 
EnforcedTimestamps 


Extensions 
ExtensionCustomaAttnbutel 
ExtensionCustomaAttribute2 
ExtensionCustomaAttnbute3 
ExtensionCustomAttnbute4 
ExtensionCustomaAttributeS 
EmadAddresses 
ExternalDirectoryObjectid 
EmailAddressPolicyEnabled 
ExchangeVersion 


ExchangeOdjectid 


False 

Gdd87963t-S4b6-72-ffS4-rf3994878rq6 

System. Security AccessControl RawSecurityDescriptor 
None 

External 


[(EventTimestamp”: “2021-05-28101:07:24 05464162", “EnforcedUntiTimestamp’:"2021°0S*28TO 
102:24.05464162","EventType":1 7) [EventTimestamp:"2021 -05-28T01:07.04.03858982","Enfo 
reedUntilTimestamp”“2021-05-28101:0203 9132", "EventType":19),{"EventTimestamp”:"2021-0 
$-28101:06:59.30346442","EnforcedUntilTimestamp”-"2021-05-28T01:01:59.0882","EventType*:19}} 


0 

0 

0 

0 

0 

{STP-AllanDQM365x744325.OnMicrosoft.com, SMTP-AllanDQM365x744325.OnMicrosoft.com) 
r995n132-g8f6-6fes-62bg-Smyh4k3ig8j7 

Faise 

0.20 (15.0.0.0) 

7716S74-htr6-7899-s45b-gr4Sh6hid4énh 


8 
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Organization Sharing | 
ee 
O 
2 
S 
S 
* 
e 
W 
V 
è 
2 
S 
O 
& 
S 


new organization relationship 


Create an organization relationship to allow users to share calendar free/busy and other 
calendar information with people in other federated Exchange organizations. Leam more 


*Domains to share with: 
Contoso.com 
@ Enable calendar free/busy information sharing 


© Calendar free/busy information with time only 

O Calendar free/ousy information with time, subject, and location 
Share calendar free/busy information for: 

© Everyone in your organization 


OA specified security group 
Enter the security group that contains the internal users that will share calendar 
free/ousy information 


Browse... 


Roles € 


admin roles user roles Outlook Web App policies 


17 ù BPO 
NAME 


Compliance Management 


Discovery Management 

Help Desk 

Hygiene Management 

Organization Management 

Recipient Management 

Records Management 
RIM-MailboxAdmins4t7b648j45f1546bbb578g327re8s5b 
Security Administrator 

Security Reader 

TenantAdmins_ 1798857484 
View-Only-Organization Management 


Outlook Web App Policies P 


admin roles user roles Outlook Web App policies 


+/78c 


Compliance Management 


This role group will allow a specified user, 
responsible for compliance, to properly 
configure and manage compliance settings 
within Exchange in accordance with their 


policy 


Assigned Roles 


Audit Logs 

Compliance Admin 

Data Loss Prevention 
Information Rights Management 
Journaling 

Message Tracking 

Retention Management 


NAME a LAST MODIFIED 


Enabled Features 


pol. cyꝰ 5/31/2021 945 AM 
Communication 

OwaMadboxPolicy-Default 3/31/2021 826 AM Exchange ActiveSynx 

Contacts 

Moodle device Contact sync 

All address ists 

Facebook comtact syr 


information management 
Notet 
indor Posies 


User experience 
Thermes 

Premsum dent 
Emal signature 
Weather 

interesting Calendars 


Time management 
Caleria 
Tasks 


admin roles user roles Outlook Web App policies 


+7 òp 


NAME a LAST MODIFIED 
Policy! $/31/2021 9:45 AM 


Policy2 5/31/2021 9:45 AM 


ommunikatjon 
OwaMailboxPolicy-Default 3/31/2021 826 AM — Act Syna 
Contacts 
Mode device contact sync 
AS address ists 
Facebook contact syn 


Enabled Features 


Emad signature 


Time management 
Calondias 

Tasks 

Reminders and notdacabons 


admin roles user roles Outlook Web App policies 


+/78c 
NAME a LAST MODIFIED 


en rene science Enabled Features 
OWA Polixy2 5/31/2021 852 AM 


OwaMailboxPolicy-Default 5/31/2021 9:26 AM Communication management 
Lechanoe ActiveSyrx 
Comtats 
Mobile dee contact syrx 
AS actress ists 
LinkeGin contact syr 
Facebook contact syr 


information management 
Notes 

inbox Rules 

Recover deleted ders 


User experience 
Themes 

Pronuum cent 
Emad sgnoture 
Places 

Weather 

interesting calendars 


Mobile Device Mailbox Policies 


mobile device access mobile device mailbox policies 


+7 ào 


NAME a MODIFIED 
Default (default) 5/17/2021 5:18 


= Default (default) 


Marketing Policy 5/31/2021) 902 


Sales Policy 5/31/2021 901 AM Aksa mobie deam that dont hay support pote: to fe 


DDr 


mobile device access mobile device mailbox policies 


+780 
NAME a MODIFIED 


Default (default) 5/17/2021 5:18 AM Marketing policy 


ee that don? tuby support polim to v e 
Sales Policy 5731/2021 901 AM 


VICES apport: 26 Aomori Goteers aud wont beck any Gewes 


mobile device access mobile device mailbox policies 


+7 ào 
NAME a MODIFIED 


Default (detou) Het S1B AM 


Sales Policy 


| apod of password pors ated wort biak any devices 


Marketing Poly 5/31/2021 902 AM 


You need to ensure that Allan Deyoung can create a new public folder for the sales 
department. 

Which two actions should you perform first? Each correct answer presents part of the 
solution. NOTE: Each correct selection is worth one point. 

A. Add Allan Deyoung to the Organization Management role group 


B. Create a new public folder mailbox 

C. Add Allan Deyoung to the Recipient Management role group 

D. Create a new shared mailbox 

E. Modify Sales Policy 

Answer: B 

Explanation: 

Reference: 
https://docs.microsoft.com/en-us/exchange/permissions-exo/feature-permissions 
https://docs.microsoft.com/en-us/exchange/collaboration-exo/public-folders/set-up- 
public-folders 


30.Joni Sherman reports that the Microsoft Outlook client on her ve 10 device 


fails to start. a 
v 


You need to troubleshoot the issue. < 
From the device, you start the Microsoft Remote Connectivity Analyzer. 
What should you run next? 

A. the Exchange ActiveSync test & 
B. the Outlook Connectivity test 0 
C. the Service Account Access test © 

D. the Microsoft Support and Recovery Assistantfor Office 365 client 

Answer: D G 

Explanation: E 

Reference: https://www.sherweb. cooled once 365/microsoft-support-and-recovery- 
assistant/ S 


31.You discover that email Sessages sent to contoso. com are NOT delivered through 
Contoso Connector. a 

You need to ensure the all email sent to contoso.com is delivered through Contoso 
Connector. Koa 

Which connectogSetting should you modify? 

A. Routing 

B. Security restrictions 

C. Use of connector 

D. Status 

Answer: C 

Explanation: 

Reference: https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/use-c 
onnectors-to-configure-mail-flow/set-up-connectors-for-secure-mail-flow-with-a- 
partner 


32.Which contacts can sign in to and access resources in the adatum.com tenant? 


A. Contact only 

B. Contact2 only 

C. Contact1 and Contact3 only 

D. Contact2 and Contact3 only 

E. Contact1, Contact2. and Contact3 
Answer: D 


33.You need to ensure that Alex Wilber can recover deleted items when using 
Outlook on the web. 
Which two actions should you perform? Each correct answer presents a complete 


solution. NOTE: Each correct selection is worth one point. Ro 
A. Assign Sales Policy to Alex Wilbur. Po 
B. Modify Marketing Policy. oe 
C. Remove Alex Wilbur from all groups. . 
D. Assign Policy2 to Alex Wilbur. ys? 
E. Modify Policy’ ee 
< 
Answer: D G 
S 
CY 
c 
ss 
34. HOTSPOT G 


G 
For each of the following statements, selegf Yes if the statement is true. Otherwise, 
select No. NOTE: Each correct selectige*ts worth one point. 


S 
Statements Yes No 
The Safe Attachments 1 policy applies to Alex Wilber C3 O 
If an email message that contains detected malware is sent to O O 


Megan Bowen, the attachment will be removed, and the message 
will be delivered 


For Lynne Robbins, to block both email messages and attachments 
that have detected malware, the priority of Safe Attachments 2 Q 
must be increased 


Answer: 


Statements Yes No 


The Safe Attachments 1 policy applies to Alex Wilber 8 C) 


f an email message that contains detected malware is sent to O ©) 
Megan Bowen, the attachment will be removed, and the message 
will be delivered 


For Lynne Robbins, to block both email messages and attachments 
that have detected malware, the priority of Safe Attachments 2 © © 
must be increased 


Explanation: 

Graphical user interface, text, application, letter, email ces 
Description automatically generated S 

Box 1: Yes Ki 

The Safe Attachments 1 policy applies to Group1. Alex Wilbers i in Group1. 
Box 2: No Ka 


Megan Bowen is in Group2. The Safe Attachments 2 potfcy applies to Group2. The 
Safe Attachments 2 policy will block the email rathegthen remove the attachment and 
deliver the email. et 
Box 3: No = 
Lynne Robbins is in the Sales department waich means she is a member of Group3. 
She is also a member of Group2 and Grędp4. 
The Safe Attachments 2 policy blocks,éiails and applies to Group2. There are no 
other Safe Attachments policies thatapply to Group3 or Group4. Therefore, Safe 
Attachments 2 is the only policy, Hat applies to Lynne Robbins so you do not need to 
increase the priority of the pg to block the emails. 

E 


V 


è 

35.Allan Deyoung myst perform a message trace of the email messages sent by 
Isaiah Langer and.provide a report that contains all the messages sent during the last 
30 days. ~ 

You need to ensure that Allan Deyoung can perform the message trace. 

What should you do? 

A. Add Allan Deyoung to the Organization Management role group 

B. Add Allan Deyoung to the Security Administrator role group 

C. For Allan Deyoung. set ElcProcessingDisabled to true 

D. For Isaiah Langer. set ElcProcessingDisabled to true 

Answer: A 

Explanation: 

Reference: https://docs.microsoft.com/en-us/exchange/permissions-exo/feature- 
permissions 


36.Lynne Robbins and the users in the sales department plan to collaborate on a 
project with a partner company named Contoso, Ltd. that has an email domain named 
contoso.com. 

You need to ensure that only the sales department users can share all their calendar 
free/busy 

information with the users in contoso.com. 

How should you configure the organization relationship? 

A. Select Calendar free/busy information with time only and enter Group‘ 

B Select Calendar free/busy information with time, subject, and location and enter 
Groups C Select Calendar free/busy information with time, subject, and location and 
enter Group3 © 

B. Select Calendar free/busy information with time only and enter Gg ps 

C. Select Calendar free / busy information with time only and entes’Group2 

Answer: C G 

Explanation: eo 

Reference: https://docs.microsoft.com/en- us/exchange/sHlaring/organization- 


relationships/create-an-organization-relationship Ka 
Ry 

Fa 

37.You need to email a list of configuration ghéinges to the Exchange Online 

environment that were recently performed Sy Allan Deyoung. 

What should you do? of 

A. Run the admin audit log report S 

B. Run the external admin audit 198 report 

C. Export the admin audit log .<° 

D. Run an administrator rolg-group report 

E. Export the mailbox audit logs 

Answer: C gg. 

Explanation: e 

Reference: ttpSiſdocs. Microsoft. com/en-us / exchange / Security-and- 


compliance / exchange- -auditing-reports/exchange-auditing-reports 


38. Topic 5, Misc. Questions 


You have a Microsoft Exchange Server 2019 organization. 

You need to provide a user named User with the ability to create and manage 
transport rules. 

To which management role group should you add User1? 

A. Compliance Management 

B. Server Management 


C. Records Management 

D. Hygiene Management 

Answer: C 

Explanation: 

References: https://docs.microsoft.com/en-us/exchange/records-management- 
exchange-2013-help 


39.You have a Microsoft 365 environment that contains 1,000 mobile devices. 
You need to recommend a solution to prevent all the mobile devices that use the 
Exchange ActiveSync protocol from authenticating by using Basic authentication. 
Which two solutions should you recommend? Each correct answer presents a 
complete solution. NOTE: Each correct selection is worth one point. oe 

A. Configure the CAS mailbox settings for each mailbox. 
B. Implement Azure Multi-Factor Authentication (MFA). 
C. Create an authentication policy. * 
D. Create a conditional access policy. 

E. Create a device access rule. & 
Answer: C,D o 
Explanation: S 
Reference: aS 
https://docs.microsoft.com/en- -us/exchangelgliénts- -and-mobile-in-exchange- 
online / disable-basicauthentication- in-exchamge- online 

nttps docs. microsoft. com / en- us/azurefattive- -directory/conditional-access/block- 
legacy-authentication S 


40. HOT SPOT 
You have a Microsoft e ee Online tenant that contains the users shown in the 
following table. Ca 


[Name f Mobile device | Mail een 


iOS Native mail client 
Microsoft Outlook for Android 


From the Exchange admin center, you issue a Wipe Data command for User1 and 
User2. 

What occurs on the device of each user? To answer, select the appropriate options in 
the answer area. NOTE: Each correct selection is worth one point. 


User: | 
All the data in the email client is wiped. 


Only email messages and calendar items are wiped. 
The mobile device is wiped. 


User2: v 
All the data in the email client is wiped. 
Only email messages and calendar items are wiped. 


The mobile device is wiped. 


Answer: «S 


User1: Yv 


Only email messages and calendar items are wiped. 
The mobile device is wiped. 


S 
41. Note: This question is part of a series of questions that present the same scenario. 
Each question in the series contains a unique solution that might meet the stated 
goals. Some question sets might have more than one correct solution, while others 
might not have a correct solution. 
After you answer a question in this section, you will NOT be able to return to it. As a 
result, these questions will not appear in the review screen. 
Your company has a Microsoft Exchange Server 2019 hybrid deployment that 
contains two Mailbox servers named MBX1 and MBX2. 
The company has the departments shown in the following table. 


Name Mailbox location Number of recipients 
EXI 


From the on-premises organization, outbound email is sent directly to the Internet by 
using sê 
DNS lookups. V 
You are informed that some sales department users send emailnessages that are 
identified as spam. Ka 
You need to automatically block the sales department usęf$ from repeatedly sending 
spam. É 
Solution: You modify the outbound spam filter policysiñ Exchange Online. 
Does this meet the goal? Ges 
A. Ves F 
B. No 0 
Answer: B * 
Explanation: W 
From the on-premises organization, Ssutbound email is sent directly to the Internet by 
using DNS lookups. Therefore, thé Exchange Online outbound spam filter will not 
scan the emails sent from tg d. premises mailboxes. 

2 


V 


è 


42.DRAG DROP e 

You plan to migrate to Microsoft Exchange Online. 

The solution myst meet the following requirements. 

Messages sent by the research & development department at your company must 
be routed to the internet through an on-premises data loss prevention (DLP) 
appliance. 

O The actual source of the messages received by Exchange Online from a third-party 
cloud filtering service must be identified. 

What features should you use to meet the requirements? To answer, drag the 
appropriate options to the correct requirements. Each option may be used once, more 
than once, or not at all. You may need to drag the split bar between panes or scroll to 
view content. NOTE: Each correct selection is worth one point. 


Exchange Features Answer Area 


Messages sent by the research & development department 
must be routed to the internet through an on-premises data | 


mE ct at ae awa ae „ö 1 „ꝙꝗ 


loss prevention (DLP) appliance: 


Conditional mail routing 


Directory Based Edge 


Blocking (DBEB) 
[ | The actual source of the messages received by Exchange 
Online from a third-party cloud filtering service must be 


Enhanced Filtering 


—— 2 —— 


identified: 
Remote domains 
Answer: 
Exchange Features Answer Area 


gà ; i Messages sent by the research & development department we z j 
Conditional mail routing : 0 Conditional mail routing 
must be routed to the internet through an on-premises data 


loss prevention (DLP) appliance: 


Directory Based Edge 
Blocking (DBEB) 


The actual source of the messages received by Exchange Enhanced Filtering 
Enhanced Filtering Online from a third-party cloud filtering service must be 


identified: 


J 


Remote domains 


Explanation: a 


Graphical user interface, text, application, email 
Description automatically generated? 
K 


Pa 


< 
43.Note: This question is part of a series of questions that present the same scenario. 
Each question in the series contains a unique solution that might meet the stated 
goals. Some question, sets might have more than one correct solution, while others 
might not have a cofrect solution. 
After you answera question in this section, you will NOT be able to return to it. As a 
result, these questions will not appear in the review screen. 
Your company has a Microsoft 365 subscription. 
Several users in the finance department of the company recently accessed unsafe 
websites by clicking on links in email messages. 
Users in the marketing department of the company report that they must be able to 
access all the links embedded in email messages. 
You need to reduce the likelihood of the finance department users accessing unsafe 
websites. The solution must affect only the finance department users. 
Solution: You modify the content filtering settings. 
Does this meet the goal? 
A. Yes 


B. No 

Answer: B 

Explanation: 

Reference: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-securit 
y/set-up-safe-links-policies ?view=0365-worldwide 


44.You recently implemented a hybrid deployment that contains a Microsoft 
Exchange Online tenant and an on-premises Exchange Server 2019 server named 
Server1. The public IP address of Server] is 131.107.1.100. 

The deployment is configured as shown in the following table. 


Accepted domain Microsoft 365 


fRemotedomain P SSCS Microsoft 385 


Users hosted in Microsoft 365 report that they restive non-delivery reports (NDRs) 
when they attempt to send email messages temailboxes hosted in Exchange Server 
2019. s 

You need to ensure that the email is delivered successfully. The solution must ensure 
that email delivery is successful for ahe users at your company. 

What should you do? g 

A. Configure the remote domaig o use a value of contoso. com. 

B. Modify the MX record to Sint to the internal Exchange servers. 

C. Configure the Outboung*connector to use a smart host of 131.107.1.100. 

D. Configure the accepiéd domain to use a value of *. 

Answer: C e 


K 


45. Vou have a Microsoft Exchange Server 2019 organization. 

You add 100 new users and create a mailbox for each user. The new users have the 
City attribute in Active Directory set to Seattle. 

You need to create a separate global address list (GAL) that contains only users who 
have the City attribute set to Seattle. The solution must ensure that any new users 
who have the City attribute of Seattle are added automatically to the new GAL. 

What should you do? 

A. From the Azure Active Directory admin center, create an Office 365 group that 
uses a dynamic membership rule. 

B. From the Exchange admin center, create a new GAL. 


C. Run the New-EmailAddressPolicy cmdlet to create a new email address policy that 
uses a recipient filter. 

D. Run the New-GlobalAddressList cmdlet to create a new address list. 

Answer: D 

Explanation: 

Reference: https://docs.microsoft.com/en-us/exchange/address-books/address- 
lists/address-lists 


46.You have hybrid deployment between a Microsoft Exchange Online tenant and an 
on-premises Exchange Server 2019 organization. The deployment uses Azure AD 
Connect. All incoming email is delivered to Exchange Online. You have 10 mail- 
enabled publich folders hosted on an on-premises Mailbox server. S 
Customers receive an error when an email message is sent to a pubic folder. 
You need to ensure that all the mail-enabled public folders can receive email 
messages from the internet. The solution must ensure that messages can be 
delivered only to valid recipients. ys? 
Solution: From Exchange Online, Create a mail contact fer each mail-enabled public 
folder. 0 
Does this meet the goal? 
A. Yes 
B. No 
Answer: B 
Explanation: 8 
No, this does not meet the goal. Creating a mail contact for each mail-enabled public 
folder in Exchange Online will noténsure that messages can only be delivered to 
valid recipients, as it does not alfow for any filtering or validation of messages. To 
ensure that messages can ghly be delivered to valid recipients, you need to configure 
a connector in Exchange Online to allow only messages from valid senders to be 
delivered to the mail-esabled public folders. 
P 

ve 
47.You have à Microsoft Exchange Online tenant that contains the groups shown in 
the following table. 


< 
E 
S 


Number of Member of 
Name Type Owner 


7 


members 


Which groups can you upgrade to a Microsoft 365 group? 

A. Group i only 

B. Group1, Group2, Group3, and Group4 

C. Group2 and Group3 only 

D. Group3 only 

E. Group1 and Group4 only 

Answer: A,E 

Explanation: 

Reference: https://docs.microsoft.com/en-us/microsoft-365/admin/manage/upgrade- 
distribution-lists?view=0365-worldwide 


48.You have a Microsoft Exchange Server 2019 organization. S 

A compliance manager plans to create retention policies for the mailSoxes of 
executive users. The policies will move specific emails to an archWe mailbox. 
You need to create an archive mailbox for each executive uses? 

What should you do? 2 


& 
A. Run the NeW- Mailbox cmdlet- Pad 
B. Enable mailbox journaling. 0 
C. Enable In-Place Archiving for each mailbox. 
D. Run the set-Mailbox cmdlet. oe 
Answer: C G 
Explanation: E 


Cà 
https://docs.microsoft.com/en-us/exchas§e/policy-and-compliance/in-place- 
archiving/in-place-archiving? view=exchserver-201 9 

ee 


8 
o 
4 fo 


49.Note: This question is part of a series of questions that present the same scenario. 
Each question in the series contains a unique solution that might meet the stated 
goals. Some question géts might have more than one correct solution, while others 
might not have a corfect solution. 

After you answer question in this section, you will NOT be able to return to it. As a 
result, these questions will not appear in the review screen. 

You have a Microsoft Exchange Online tenant that contains the following email 
domains: 

Adatum. com 

Contoso. com 

Fabrikam. com 

When external recipients receive email messages from the users in the tenant, all the 
messages are delivered by using the @contoso.com email domain. 

You need to ensure that the users send email by using the @fabrikam.com email 
domain. 

Solution: You create an email address policy. 


Does this meet the goal? 

A. Yes 

B. No 

Answer: B 

Explanation: 

This would work in Exchange on-premise but you cannot create email address 
policies for user mailboxes in Exchange Online. 


50.Note: This question is part of a series of questions that present the same scenario. 
Each question in the series contains a unique solution that might meet the stated 
goals. Some question sets might have more than one correct solution, while others 
might not have a correct solution. 2 

After you answer a question in this section, you will NOT be able to séturn to it. As a 
result, these questions will not appear in the review screen. S 

You have a Microsoft Exchange Online tenant that contains tne following email 
domains: 


eo 
* 
Adatum. com & 
Ny 
O Contoso.com Ka 
Fabrikam. com „$ 


When external recipients receive email messages from the users in the tenant, all the 
messages are delivered by using the @contgso. com email domain. 
You need to ensure that the users send enfail by using the @fabrikam.com email 

G 


domain. S 

Solution: From the Microsoft 365 postal, you set fabrikam.com as the default domain. 
Does this meet the goal? S 

A. Yes K 

B. No . 

Answer: A a 

Explanation: Ka 


Reference: https: lige. microsoft.com/en-us/microsoft-365/admin/setup/domains-faq? 
view= =0365-worlg@iderhow- -do-i-set-or-change-the-default-domain-in-microsoft-365 


51.NO: 25 

You manage a hybrid deployment between Microsoft Exchange Online and on- 
premises Exchange Server 2019. The deployment contains a primary SMTP domain 
named contoso.com. 

Users have email addresses that use a syntax of firstname.lastname@contoso.com. 
A user named Ben Smith receives a new client computer. You configure the 
computer to access Ben Smith's mailbox. Ben Smith reports that he cannot connect 
to his mailbox from the new computer. 

You verify that other users can connect successfully to their mailbox and that new 


users can discover their mailboxes by using Autodiscover. 

You need to ensure that Ben Smith can connect to his mailbox from the new 
computer. 

What should you do? 

A. Modify the primarySmtpAddress property for the mailbox of Ben Smith. 

B. Modify the email address of Ben Smith to use a syntax of 
firstname.lastname@contoso.onmicrosoft.com 

C. Modify the RemoteRoutingAddress parameter for the mailbox of Ben Smith. 
D. Modify the email address of Ben Smith to use a syntax of 
lastname.firstname@contoso.com 

Answer: C 


© 
52.You have a hybrid deployment that contains a Microsoft Exchangé ¢ Online tenant 
and an on-premises Exchange Server 2019 server named Server: All users use an 
email address suffix of @contoso.com. | 
You migrate 200 mailboxes from Server1 to Exchange Onligs by using Exchange 
PowerShell cmdlets. Users hosted on Server can sendmail messages to the 


migrated mailboxes. Ka 
In Microsoft 365, you create a new mailbox that us an email address of 
user1@contoso.com. Fa 


When email is sent from the mailboxes hostgs on Server1 to user1@contoso.com, 
the senders receive a non-delivery report | (NDR) that contains the following text: 
"550 5.1.10 RESOLVER.ADR. RecipiegiiotF ound; 

Recipient not found by SMTP addregs lookup." 

You verify that Microsoft 365 mailoxes can send email to user1@contoso.com 
successfully. K 

You delete the user accounfsand mailbox of User’. 

You need to ensure that when new mailboxes are created, all the users at your 
company can exchange’ email successfully 

Which two actions sould you perform? Each correct answer presents a complete 
solution. NOTE: Fach correct selection is worth one point. 

A. From AzureAD Connect, modify the synchronization settings 

B. From Server1, run the New-RemoteMailbox cmdlet 

C. From Server1, run the Enable-Mailbox cmdlet 

D. From the on-premises network, create new mailboxes, and then migrate the 
mailboxes 

to Microsoft 365 

E. From the Exchange admin center, modify the properties of the Outbound connector 
Answer: B,D 

Explanation: 

The problem happens because the on-premise Exchange server is not aware of the 
existence of the mailbox created in Exchange Online. To prevent this happening, new 


mailboxes need to be created from the on-premise Exchange server. 

You can create on Exchange Online mailbox from the on-premise server by running 
New-RemoteMailbox cmdlet. Alternatively, you can create a local mailbox on the on- 
premise server and then migrate the mailbox to Exchange Online. 


53.HOTSPOT 

You have a Microsoft Exchange Server 2019 organization. 

The recovery options for a user named User1 are configured as shown in the 
following exhibit. 


[PS] C:\Windows\system32>Get -Mailbox Userl | fl RetainDeletedItemsFor, 
Ret 


tainDeletedItemsUntilBackup, SingleItemRecoveryEnabled, Database 


RetainDeletedItemsFor : 14.00:00:00 
RetainDeletedIitemsUntilBackup : False 
SingleItemRecoveryEnabled : False 
Database : MDOOI] 


[PS] C:\Windows\system32>Get —MailboxDatabase MDOO1 | f1 
DeletedItemRetention, RetainDeletedItemsUntilBackup 


DeletediIitemRetention : 30.00:00:00 


RetainDeletedItemsUntilBackup : False 


G 
$ 


KCà 
Use the drop-down menus to select the.4nswer choice that completes each statement 
based on the information presented the graphic. NOTE: Each correct selection is 
worth one point. 


be available for the user to recover [answer choice]. 


for 14 days 
for 30 days 


until a backup occurs 14 days after the deletion 
until a backup occurs 30 days after the deletion 


When email messages are hard deleted by User1, | v 
[answer choice] restoring from a backup. only an administrator can recover the messages without 
an administrator or User1 can recover the messages without 


the messages can be recovered only by 


Answer: 


Email messages that are soft deleted by User will 
be available for the user to recover [answer choice]. v 


for 14 days 
for 30 days 


until a backup occurs 14 days after the deletion 


until a backup occurs 30 days after the deletion 


When email messages are hard deleted by User1, 
[answer choice] restoring from a backup. only an administrator can recover the messages without 
an administrator or User1 can recover the messages without 
the messages can be recovered only by 


Explanation: 
Graphical user interface, text, application ces 
Description automatically generated S 


=- a 


Send As for User4 
Full Access for User3 


Send on Behalf for User} 


You plan to migrate the mailboxes to Exchange Online by using remote mailbox move 


requests. 
The mailboxes will be migrated according to the schedule shown in the following 
table. 


ES WS a lala 


— — User, User3, Users 


Mailboxes migrated the same week will have their mailbox move requests included in 
the same batch and will be cut over simultaneously. 
For each of the following statements, select Yes if the statement is trug, Otherwise, 


select No. NOTE: Each correct selection is worth one point. s 

Vv 

K 
Statements ° Yes No 
The mail forwarding settings of the User1 mailbox will be preserved O O 


automatically after the migration. 


The permissions granted to the User4 mailbox for the User2 O O 
mailbox will be preserved automatically after the migration. 


The permissions granted to the User3 mailbox for the User4 E) O 
mailbox will be preserved automatically after the migration. 
Answer: 2 
Kà 
A 
Statements Yes No 
The mail forwarding settings of the User1 mailbox will be preserved O Te) l 


automatically after the migration. 


The permissions granted to the User4 mailbox for the User2 IO! O 
mailbox will be preserved automatically after the migration. 


The permissions granted to the User3 mailbox for the User4 Oi O 
mailbox will be preserved automatically after the migration. = 


Explanation: 
References: 


https://docs.microsoft.com/en-us/exchange/exchange-hybrid 
https://practical365.com/exchange-online/configuring-exchange-hybrid-cross-forest- 
permissions/ 


55.HOTSPOT 
You create a transport rule as shown in the following exhibit. 


Name : Rule1 

State : Enabled 

Mode ; AuditAndNotify 
Priority 3 51 

Sent Jo User ie contoso. com) 


StopRuleProcessing : True 
DeleteMessage : False 
Disconnect False 
RedirectMessageTo : 
RejectMessageEnhancedStatusCode : 5.7.1 
RejectMessageReasonText : Please forward all sales enquiries to 'Sales@Contoso.com'. 
Quarantine : False 
SubjectOrBodyContainsWords : {Quote, Enquiry, Sales} 


S 
KO 
Use the drop-down menus to select the answef choice that completes each statement 
based on the information presented in the graphic. NOTE: Each correct selection is 


worth one point. $ 


Answer Area 


If an email message sent to User1 
contains the word Quote, [answer choice] |the message will be rejected 
the message will be delivered 
the message will be redirected to sales@contoso.com 


The transport rule has [answer choice] 


the highest priority and cannot be superseded by another rule 


the lowest priority. Another rule can supersede Rule1 
the medium priority. Another rule can supersede Rule1 


Answer: 


“Answer Area 


f an email message sent to User 
contains the word Quote, [answer choice] the message will be rejected 
the message will be delivered 
the message will be redirected to sales@contoso.com 


The transport rule has [answer choice] 


the highest priority and cannot be superseded by another rule 
the lowest priority. Another rule can supersede Rule! 
the medium priority. Another rule can supersede Rule! 


56.You have a Microsoft Exchange Online tenant that uses an email gemain named 


contoso.corn. E 
An in-caning email messages route through an third-party filtering Service named 
Filter to connector named Connector’. G 


You discover that incoming messages contain headers sech) the source IP 
address as Filter1. & 

You to ensure that incoming email messages contaigieaders that specify source IP 
address of the original sender. The solution must t prevent any charges to the service. 
What should you do? aS 

A. From Microsoft 365 Defender portal configsre enhanced filtering for Connector1. 
B. Configure Connector' to authenticate wess ages by using the IP address of Filter 
service. 80 

C. Configure the MX Of contoso.congto point to contoso- 
can.mailgotection.outbok.com. S 

D. From the Exchange admin.génter. create a transport rule to rewrite header for 
incoming messages. Ê 
Answer: C Rå 


57.You have a Microsoft Exchange Online tenant that contains a public folder named 
CustomerSupport. You need to access CustomerSupport by using Outlook on the 
web. 

Which section in Outlook on the web should you add CustomerSupport? 

A. Favorites 

B. Folders 

C. Groups 

Answer: C 


58.HOTSPOT 
You have a Microsoft Exchange Online tenant as shown in the following exhibit. 


op 
9 Contoso Electronics 


Exchange admin center 


connectors 


ssages to and from your Office 365 organizatio 
(st check to see if you should create a connector 


rs? Just send us feedback and let us know what you liked, didn't like, or what we can 


＋ 41202 
STATUS a NAME FROM 10 
on Connector to Serveri Office 365 Euu Ear EEE Connector to Server? 


Mail flow scenano 
From: Office 365 
To: Partner organization 


Description 
None 


Status 
toti 


38 
Vabdate the 
Last validation — EF aded 
Last validation time: 4/7/2020 4:04 PM 


When to use the connector 
Use only for emai sent to these domains * 


Routing method 
Route email messages through these smart hosts 
131.107.100.200 


Security restrictions 

Always use Transport Layer Secunty (TLS) and connect only 
if the recipient's email server certificate is issued by a trusted 
certificate authonty (CA) and the subject names matches this 
domain: servert contoso.com 


All email recipients have an email agefess that uses an SMTP suffix of 
@contoso.com. g 

Use the drop-down menus to seféct the answer choice that completes each statement 
based on the information presented in the graphic. NOTE: Each correct selection is 
worth one point. V 


131.107.100.200 will route v 


all email messages from Exchange Online to any contoso.com recipients. 
all email from Exchange Online to any external recipients 
all email messages from Exchange Online to recipients hosted on Server1 only 


The Exchange Online tenant v 
cannot receive email messages from the internet 


can receive email messages from server1.contoso.com only 
can receive email messages from any email host on the internet 


Answer: 


131.107.100.200 will route v 


all email messages from Exchange Online to any contoso.com recipients 
all email from Exchange Online to any external recipients 
all email messages from Exchange Online to recipients hosted on Server1 only 


The Exchange Online tenant v 
cannot receive email messages from the internet 
can receive email messages from server1.contoso.com only 
can receive email messages from any email host on the internet 


Explanation: 

Box 1: 

Under “When to use this connector”, it says “Use only for email sent to these 
domains: 5 

The asterisk means all domains so any external email will use the connector. 

Box 2: V 

With Exchange Online, you don’t need to configure a receive cofinector as you would 
with on-premises Exchange. Therefore, the server by defauleswill be able to receive 


emails from any email host. Sa 
@ 


À 
O 
59.You have a Microsoft Exchange Online tenante” 
Remote users report that they receive an erroptnessage when they attempt to add 
their email account to Microsoft Outlook. a 
You need to confirm that the DNS records resolve correctly for the users. 

Which two DNS records should you test? Each correct answer presents part of the 
solution. NOTE: Each correct selegfion is worth one point. 
A. autodiscover.outlook.com _ S 
B. smtp. offioe 365. com S 
C. outlook.office365.com 3° 
D. security. microsoft οοm 
E. portal. office. com 
Answer: A, C G 

. RS 
Explanation: £ 
Reference: https://docs.microsoft.com/en- 
us/exchange/troubleshoot/administration/incorrect-settings 


60.You have a Microsoft Exchange Online tenant that has Office 365 Advanced 
Threat Protection (ATP) enabled. 

The tenant contains a user named Ben Smith who has a UPN of 
ben.smith@fabrikam.com. 

Ben Smith is protected by using an ATP anti-phishing policy. 

Ben Smith reports that emails sent from his personal account of 


ben.smith@relecloud.com are not delivered to his work email account. 

You need to ensure that personal emails are delivered to the 
ben.smith@fabrikam.com 

What should you do? 

A. Create a transport rule to assign the MS-Exchange-Organization- 
PhishThresholdLevel header a value of 2 for the message received from 
ben.smith@relecloud.com 

B. Add ben.smith@fabrikam.com as a trusted sender to the ATP anti-phishing policy. 
C. Add ben.smith@relecloud.com as a trusted sender to the ATP anti phishing. 

D. Add relecloud.com to the ATP anti-phishing list of misted domains. 

Answer: C 

Explanation: 

Reference: https://docs.microsoft.com/en-us/microsoft- -365/security/offise- -365-securit 
y/configure-atp-anti-phishing-policies? view=0365-worldwide = 


~ 
G 
61. Vou have a Microsoft 365 subscription. KO 
A safe attachments policy that uses Dynamic Delivery is,Applied to all recipients who 
match your SMTP 0 
domains. Pa 


You need to prevent attachments form being sgafined when internal users send email 
to one another. Ka 
What should you do? S 
A. From the Security & and Compliangg amin center, modify the safe attachments 
policy. S 
B. From the Security & and Complfance admin center, modify the Service assurance 
settings. KG 
C. From the Exchange admier center, create a transport rule. 
D. From the Exchange agin center, modify the malware filter. 
Answer: C 

X 
Explanation: 8 
Create a transport rule (or mail flow rule as they are called nowadays) to configure the 
message header: X-MS- -Exchange-Organization-SkipSafeAttachmentProcessing. 
Reference: https://docs.microsoft.com/en-gb/archive/blogs/office365labs/eo-atp- 


considerations-reports-demonstrations 


62.NO: 26 

You have 1,000 user accounts that are each licensed for Microsoft 365. Each user 
account has a Microsoft Exchange Online mailbox. 

Ten of the user accounts are configured as service accounts for applications. The 
applications send event notifications to the mailboxes of the service accounts by 
using SMTP. The developers of each application have delegated access to the 


mailbox of their respective application. The solution must minimize licensing costs. 
What should you do? 

A. Replace the service account mailboxes with a Microsoft 365 group 

B. Convert the service account mailboxes into mail-enabled contacts 

C. Replace the service account mailboxes with a single user mailbox 

D. Replace the service account mailboxes with a single user mailbox that contains a 
folder for each application. 

Answer: B 


63.CORRECT TEXT 
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab 
section. This may take a few minutes, and the wait time will not be deducted from 
your overall test time. Po 
When the Next button is available, click it to access the lab sectias” In this section, 
you will perform a set of tasks in a live environment. While mast functionality will be 
available to you as it would be in a live environment, some fánctionality (e.g., copy 
and paste, ability to navigate to external websites) will net be possible by design. 
Scoring is based on the outcome of performing the tasks stated in the lab. In other 
words, it doesn't matter how you accomplish the task, if you successfully perform it, 
you will earn credit for that task. oe 
Labs are not timed separately, and this exarpsmmay have more than one lab that you 
must complete. You can use as much times you would like to complete each lab. 
But, you | 

y G 
should manage your time appropriately to ensure that you are able to complete the 
lab(s) and all other sections of theséxam in the time provided. 
Please note that once you subeiit your work by clicking the Next button within a lab, 
you will NOT be able to retygn to the lab. 
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ExamUser 


Use the following login credentials as needed: 
To enter your username, place your cursor in the Sign in box and click on the 
username below. 


To enter your password, place your cursor in the Enter password box and click on the 
password below. 

Microsoft 365 Username: admin@abc.com 

Microsoft 365 Password: xxxxxx 

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to 
reload the portal in a new browser tab. 

The following information is for technical support purposes only. 

Lab Instance: XXXXXX 

You need to ensure that a notification email is sent to compliance@constoso.com 
when a user marks an email message as Not Junk in Microsoft Outlook. 

To complete this task, sign in to the Microsoft 365 admin center. 

Answer: See explanation below. 

Explanation: Re 

Go to the Microsoft 365 Defender portal and under Email & collaboration select 
Policies & rules > Alert policy. G 

An alert policy consists of the following settings and conditions. 
- Activity the alert is tracking. You create a policy to track anvactivity or in some cases 
a few related activities, such a sharing a file with an extemal user by sharing it, 
assigning access permissions, or creating an anonymous link. When a user performs 
the activity defined by the policy, an alert is triggered’ based on the alert threshold 
settings. os 

- Activity conditions. For most activities, you gain define additional conditions that must 
be met to trigger an alert. Common conditisns include IP addresses (so that an alert 
is triggered when the user performs tng Activity on a computer with a specific IP 
address or within an IP address range), whether an alert is triggered if a specific user 
or users perform that activity, andgwhether the activity is performed on a specific file 
name or URL. You can also cogfigure a condition that triggers an alert when the 
activity is performed by any ser in your organization. The available conditions are 
dependent on the selected activity. 

(| You can also define Ser tags as a condition of an alert policy. This results in the 
alerts triggered by tee policy to include the context of the impacted user. You can use 
system user tagsGr custom user tags. 

- When the aleft is triggered. You can configure a setting that defines how often an 
activity can occur before an alert is triggered. This allows you to set up a policy to 
generate an alert every time an activity matches the policy conditions, when a certain 
threshold is exceeded, or when the occurrence of the activity the alert is tracking 
becomes unusual for your organization. 

lf you select the setting based on unusual activity, Microsoft establishes a baseline 
value that defines the normal frequency for the selected activity. It takes up to seven 
days to establish this baseline, during which alerts won't be generated. After the 
baseline is established, an alert is triggered when the frequency of the activity tracked 
by the alert policy greatly exceeds the baseline value. For auditing-related activities 
(such as file and folder activities), you can establish a baseline based on a single user 


or based on all users in your organization; for malware-related activities, you can 
establish a baseline based on a single malware family, a single recipient, or all 
messages in your organization. 
- Alert category. To help with tracking and managing the alerts generated by a policy, 
you can assign one of the following categories to a policy. 
- Data loss prevention 
- Information governance 
- Mail flow 
- Permissions 
- Threat management 
- Others 
O When an activity occurs that matches the conditions of the alert policy, the alert 
that's generated is tagged with the category defined in this setting. Thigallows you to 
track and manage alerts that have the same category setting on the Alerts page in the 
compliance center because you can sort and filter alerts based op Category. 
- Alert severity. Similar to the alert category, you assign a sevefity attribute (Low, 
Medium , High, or Informational) to alert policies. Like the alért category, when an 
activity occurs that matches the conditions of the alert policy, the alert that's 
generated is tagged with the Ka 
same severity level that's set for the alert policy. Again, this allows you to track and 
manage alerts that have the same severity settiog on the Alerts page. For example, 
you can filter the list of alerts so that only ales with a High severity are displayed. 
Email notifications. You can set up the p@ticy so that email notifications are sent (or 
not sent) to a list of users when an alerbis triggered. You can also set a daily 
notification limit so that once the maxitnum number of notifications has been reached, 
no more notifications are sent for We alert during that day. In addition to email 
notifications, you or other ad lefstrators can view the alerts that are triggered by a 
policy on the Alerts page. Cgnsider enabling email notifications for alert policies of a 
specific category or that pave a higher severity setting. 

X 

Ka 

64.You manage ea Microsoft Exchange Server 2019 hybrid deployment. All user 
mailboxes are Boated both on-premises and in the cloud. 
You need to configure the deployment so that the on-premises mailboxes can access 
the public folders. 
Which three commands should you run? Each correct answer presents part of the 
solution. NOTE: Each correct selection is worth one point. 
A. Sync-MailPublicFolders.ps1 
B. Set-OrganizationConfig CPublicFoldersEnabled Remote 
C. Import-PublicFolderMailboxes.ps1 
D. Sync-MailPublicFoldersCloudToOnprem.ps1 
E. Set-OrganizationConfig CPublicFoldersEnabled Local 
CRemotePublicFolderMailboxes PFMailbox1 


Answer: B,C,D 

Explanation: 

Reference: https://docs.microsoft.com/en-us/exchange/hybrid-deployment/set-up-exo- 
hybrid-public-folders 


65.Your company has a Microsoft Exchange Server 2019 hybrid deployment. 
Users in the advertising department and the editorial department of the company 
have mailboxes in Exchange Online. 

A company policy requires that the advertising department users and the editorial 
department users be segmented based on the following requirements: 


The advertising department users must not see the editorial department users in the 
global address list Re 

D (GAL). Po 
C£ The editorial department users must not see the advertising department users in the 
GAL. G 
The editorial department users must be treated as externat recipients of the 
advertising department users. . 
The advertising department users must be treated as. ‘external recipients of the 
editorial department users. P 


You need to recommend a solution that meets {pe requirements and minimize costs 


and effort. G 

What should you recommend? E 

A. In the Exchange Online tenant, create Separate address book policies (ABPs) for 
the S 

advertising and S 


editorial departments. 

B. Migrate all the e a advertising department to the on-premises 
organization, and then enable address book policy (ABP) routing. 

C. Purchase an additigeial Microsoft 365 subscription, and then migrate all the 
mailboxes of the advertising department to the new subscription. 

D. Create two addfess book policies (ABPs) in Exchange Online, and then enable 
ABP > 

routing for the 

Exchange Online tenant. 

Answer: D 

Explanation: 

References: https://docs.microsoft.com/en-us/exchange/email-addresses-and- 
address-books/address-book-policies/address-book-policies?view=exchserver-2019 


66.You have a Microsoft Exchange Server 2019 organization. 
You run the following commands. 


New-Management-Scope CName "VIP Mailboxes" CRecipientRoot "Contoso.com/ 
Executives" 
CRecipientRestrictionFilter (RecepientT ype Ceq "UserMailbox") 
New-ManagementRoleAssignment CSecurityGroup "VIP Admins" CRole "Mail 
Recipients" 
CCustomRecipientWriteScope "VIP Mailboxes" 
You have a user named Admin1. 
You need to ensure that Admini can manage the mailboxes of users in the 
Executives organizational unit (OU) only. 
What should you do? 
A. Modify the membership of VIP Admins. 
B. Create a custom role group. 
C. Add Admin to the Recipient Management management role group,® 

© 


D. Move Admin1 to the Executives OU. G 
Answer: A oe 
Explanation: x? 


Q 

References: https://social.technet.microsoft.com/Forums/e hange/en-US/b316a841- 
c39d-483a-ac8e-64d5904c42e6/howto-limit-recipient-masiagement-rights-to-users-in- 
a-ou-in-exchange-2010-sp1?forum=exchangesvrad misilegacy 
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67.Note: This question is part of a series of quéstions that present the same scenario. 
Each question in the series contains a unigde solution that might meet the stated 
goals. Some question sets might have fore than one correct solution, while others 
might not have a correct solution. S 
After you answer a question in this*section, you will NOT be able to return to it. As a 
result, these questions will not per in the review screen. 
You have a Microsoft Exchaage Online tenant that contains 1,000 users. 
A user named User! receives a non-delivery report (NDR) when attempting to send 
an email message to apt internal group named sales@contoso.com. The NDR 
contains the following text: “5.7.1 Delivery not authorized.” 
You need to ensure that User1 can send email to sales@contoso.com successfully. 
Solution: You Modify the properties of the sales@contoso.com group. 
A. Yes 
B. No 
Answer: A 
Explanation: 
Reference: https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/non- 
delivery-reports-in-exchange-online/fix-error-code-550-5-7-1 -in-exchange-online 


68.Your company has a Microsoft Exchange Online tenant named contoso.com. 
The company acquires a company named ADatum Corporation that uses a third-party 


IMAP email service named adatum.com. 

You plan to migrate the mailbox content of adatum.com to contoso.com. 
You need to connect Microsoft 365 to the IMAP email service. 

What should you create first? 

A. a new organization relationship 

B. anew migration endpoint 

C. anew remote domain 

D. a new staged migration batch 

Answer: B 

Explanation: 

Reference: https://docs.microsoft.com/en-us/exchange/mailbox-migration/migrating- 
imap-mailboxes/migrating-imap-mailboxes 


<$ 
Po 
69.You have a hybrid deployment between a Microsoft Exchange Online tenant and 
an on-premises Exchange Server 2019 organization. | 
Several users hosted in Microsoft 365 report that when they Send email messages to 
mailboxes hosted in Exchange Server 2019, the messages fail to be delivered. 
You need to examine the non-delivery reports (NDRs}Sent to the Microsoft 365 
mailboxes. $ 
Which two actions should you perform? Each caffect answer presents a complete 
solution. NOTE: Each correct selection is wos one point. 
A. From an on-premises Exchange serverstise the transport logs. 
B. From an on-premises Exchange seryér, use the SMTP logs. 
C. From the on-premises Exchange,@dimin center, use a message trace. 
D. From the Exchange admin center, use a message trace. 
E. From the Exchange Me Shell, run the Get-Queue cmdlet. 
Answer: C,D 2 
Explanation: a 
Reference: https: lldogsénicrosott com/en-us/exchange/monitoring/trace-an-email- 
message mess agg race. fac 
S 

G 
70.DRAG DROP 
Your company named Contoso, Ltd. has a Microsoft Exchange Server 2019 hybrid 
deployment. 
A partner company named Fabrikam, Inc. uses an Exchange Online subscription for 
email. 
You need to ensure that all the users at Fabrikam can view the free/busy information 
of the users at Contoso. 
What should you configure? To answer, drag the appropriate components to the 
correct companies. Each component may be used once, more than once, or not at all. 
You may need to drag the split bar between panes or scroll to view content. NOTE: 


Each correct selection is worth one point. 


Components Answer Area 


A connector 


For Fabrikam: Component 
A sharing policy 
For Contoso: Component 
A remote domain 
A federation trust 
An organization relationship 
rd 
Answer: s 
P 
Components Answer Area 


A connector 
For Fabrikam: An organization relationship 


A sharing policy 
For Contoso: An organization relationship 
A remote domain 


A federation trust 


An organization relationship 


Explanation: 
Graphical user interface 
Description automatically generated with low confidence 


71.CORRECT TEXT 


Please wait while the virtual machine loads. Once loaded, you may proceed to the lab 
section. This may take a few minutes, and the wait time will not be deducted from 
your overall test time. 

When the Next button is available, click it to access the lab section. In this section, 
you will perform a set of tasks in a live environment. While most functionality will be 
available to you as it would be in a live environment, some functionality (e.g., copy 
and paste, ability to navigate to external websites) will not be possible by design. 
Scoring is based on the outcome of performing the tasks stated in the lab. In other 
words, it doesn't matter how you accomplish the task, if you successfully perform it, 
you will earn credit for that task. 

Labs are not timed separately, and this exam may have more than one lab that you 
must complete. You can use as much time as you would like to complete each lab. 
But, you should manage your time appropriately to ensure that you argnble to 
complete the lab(s) and all other sections of the exam in the time provided. 

Please note that once you submit your work by clicking the Next ptitton within a lab, 


you will NOT be able to return to the lab. | 
ee 
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ExamUser 


Sign in 


Use the following login credentials as needed: 
To enter your username, place your cursor in the Sign in box and click on the 
username below. 


To enter your password, place your cursor in the Enter password box and click on the 
password below. 
Microsoft 365 Username: admin@abc.com 
Microsoft 365 Password: xxxxxx 
If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to 
reload the portal in a new browser tab. 
The following information is for technical support purposes only. 
Lab Instance: XXXXXX 
You need to ensure that the users in your company can schedule a conference room 
named Room i in the company’s office by using Microsoft Outlook. 
To complete this task, sign in to the Exchange admin center. 
Answer: 
n the Exchange admin center, navigate to Recipients > Resources. .» 

Jo create a room mailbox, click New + > Room mailbox. P 
Use the options on the page to specify the settings for the ne ie Mailbox. 
Room name: Use this box to type a name for the room mailbgx. This is the name 
that's listed in the resource mailbox list in the Exchange adm center and in your 
organization's address book. This name is required and j ican’ t exceed 64 characters. 
- Alias: A room mailbox has an email address so it canvreceive booking requests. The 
email address consists of an alias on the left side ofthe @ symbol, which must be 
unique in the forest, and your domain name on tbe right. The alias is required. 
- Location, Phone, Capacity: You can use these fields to enter details about the room. 
However, as explained earlier, you can ingede some or all of this information in the 
room name so users can see it. ot 
O When you're finished, click Save beate the room mailbox. 


eo 
72.You have a Microsoft Exghiange Online tenant that contains a resource mailbox 
named ConferenceRoory?: 
ConferenceRoom1 is gonfigured as shown in the following exhibit. 
Pal 
ev 


+ 


ConferenceRoom1 


general Booking requests: 

» booking delegates Use customized setting to accept or decline booking requests 
booking options Accept or decline booking requests automatically 
contact information © Select delegates who can accept or decline booking requests 
email address 
MailTip Delegates: 
mailbox delegation * 


Save Cancel 

K 
You need to review the customized setting for booking requests. 
Which cmdlet should you run? 
A. Get-ResourceConfig & 
B. Get-Mailbox s 
C. Get-MailboxCalendarFolder 20 
D. Get-Calendar Processing o 
Answer: D 
Explanation: S 
Reference: K 
https://itpro.outsidesys. com/20174f1/06/exchange- -configuring-the-resource-booking- 
attendant-with-powershell/ Ki 
https://docs.microsoft. com iert. Us / poꝰWershell/ module / exchange / get- 


calendarprocessing?view*exchange- -ps 
Ses. 

Pol 
73.CORRECT EXT 
: 240 SIMULATION 
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab 
section. This may take a few minutes, and the wait time will not be deducted from 
your 
overall test time. 
When the Next button is available, click it to access the lab section. In this section, 
you will perform a set of tasks in a live environment. While most functionality will be 
available to you as it would be in a live environment, some functionality (e.g., copy 
and paste, ability to navigate to external websites) will not be possible by design. 
Scoring is based on the outcome of performing the tasks stated in the lab. In other 


G 


words, it doesn't matter how you accomplish the task, if you successfully perform it, 


you will earn credit for that task. 

Labs are not timed separately, and this exam may have more than one lab that you 
must complete. You can use as much time as you would like to complete each lab. 
But, you should manage your time appropriately to ensure that you are able to 
complete the lab(s) and all other sections of the exam in the time provided. 

Please note that once you submit your work by clicking the Next button within a lab, 
you will NOT be able to return to the lab. 


ExamUser 


Sign in 


Use the following login credentials as needed: 
To enter your username, place your cursor in the Sign in box and click on the 
username below. 


To enter your password, place your cursor in the Enter password box and click on the 
password below. 

Microsoft 365 Username: admin@abc.com 

Microsoft 365 Password: xxxxxx 

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to 
reload the portal in a new browser tab. 

The following information is for technical support purposes only. 

Lab Instance: XXXXXX 

You need to ensure that all email sent or received by a user named Diego Siciliani is 
preserved in Exchange Online. The solution must prevent Diego Siciliani from 
permanently deleting any email messages for 180 days. 

To complete this task, sign in to the Microsoft 365 admin center. 

Answer: S 

You need configure a Retention Policy. You could also use a Litigation Hold but 
Retention Policies are replacing Litigation Holds in future, so a Retention Policy is the 
way to go. Ka 

In the Microsoft 365 Compliance Center, go to the Policies’ section and click 


Retention. Ê 


Click the New retention policy link. 0 
Enter a name for the policy (such as Diego Sicilii Email Retention") and click 
Next. oe 
In the retention period, enter 180 days and,élick Next. 
Ensure that only Exchange email is selested. SharePoint sites, OneDrive accounts 
and Office 365 groups are also selected by default so you may need to deselect 
them. S 
Click the Choose recipients link or Exchange email. 
Click the Choose recipients púņtton to open a list of recipients. 
Select Admin1 and click thè Choose button then click the Done button. 
Click Next. xy 
Click the Create this,policy button. 

S 


* 
* 
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74.You have aff on-premises Microsoft Exchange Server 2019 organization. 
You plan to configure the environment to support a hybrid deployment. 
You need to ensure that you can migrate mailboxes from the on-premises 
organization to Exchange Online. 
Which two ports should be open between Exchange Online and the on-premises 
organization? Each correct answer presents part of the solution. NOTE: Each correct 
selection is worth one point. 
A. 25 
B. 80 
C. 143 
D. 389 


E. 443 

F. 993 

Answer: A,E 

Explanation: 

Reference: https://docs.microsoft.com/en-us/exchange/hybrid-deployment- 
prerequisites#hybrid-deployment-protocolsports-and-endpoints 


75.You have a Microsoft Exchange Server 2019 hybrid deployment. 

You migrate public folders from on-premises to Exchange Online by using the batch 
migration process. 

After the batch migration completes, additional public folders are created on- 
premises. <$ 

You need to migrate the new on-premises public folders to Exchange" Online. 
What should you do? K 

A. Export the contents of the folders to a PST file, and then import the PST files by 
using Outlook PST export. KO 

B. Create a new public folder migration batch that contains only the new folders. 

C. Repeat the original batch migration process and add the new folders to the 


migration batch. 
o 

Answer: A e 

Explanation: G 


Reference: https://docs. microsoft.com/en-yS/exchange/collaboration/public- 
folders/mig rate-to-exchange-online ?vigw=exchserver-201 9 
g 

s 
76.You have a Microsoft Excharige Online tenant. 
All users are assigned only gn Office 365 Enterprise E3 license. 
You need to ensure that tie users can use only Microsoft Outlook to connect to their 
Microsoft 365 mailbox When they connect from an Android device. 
What should you creàte? 
A. an Outlook Web App policy in Exchange Online 
B.a connectiof filter policy in Exchange Online Protection (EOP) 
C. an Exchange ActiveSync device access rule 
D. an app protection policy in Microsoft Endpoint Manager 
Answer: C 


77.Note: This question is part of a series of questions that present the same scenario. 
Each question in the series contains a unique solution that might meet the stated 
goals. Some question sets might have more than one correct solution, while others 
might not have a correct solution. 

After you answer a question in this section, you will NOT be able to return to it. As a 


result, these questions will not appear in the review screen. 

You have a Microsoft Exchange Online tenant that uses an email domain named 
contoso.com. 

You need to prevent all users from performing the following tasks: 

Sending out-of-office replies to an email domain named fabrikam.com. 
Sending automatic replies to an email domain named adatum.com. 

The solution must ensure that all the users can send out-of-office replies and 
automatic replies to other email domains on the internet. 

Solution: You create one mail flow rule. 

Does this meet the goal? 


A. Yes 

B. No 

Answer: B < 
Explanation: Po 
Reference: https://docs.microsoft.com/en- us/exchange/mail-flow,pést- 
practices/remote-domains/remote-domains . 


z 


Ma 
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78.You have a Microsoft 365 environment that contains 1,000 mailboxes. 
You need to ensure that only an administrator named Admin i can use the Exchange 
Management Shell to manage oe 
What should you do? G 
A. Create a conditional access policy and apply the policy to all users. 
B. For all users, run the set-user omdlepand specify the -RemotePowershellEnabled 
parameter. S 
C. Create a conditional access polity and apply the policy to Admin1. 
D. For Admin, run the e and specify the -RemotePowerShellEnabled 
parameter. 


Answer: A Vv 


79.DRAG DROR®* 

You purchase 85 Microsoft 365 subscription. 

You create mailboxes for 10 users. Each user has a PST file stored in a network 
share. 

You need to migrate the PST files to the mailboxes. 

In which order should you perform the actions? To answer, move all actions from the 
list of actions to the answer area and arrange them in the correct order. NOTE: More 
than one order of answer choices is correct. You will receive credit for any of the 
correct orders you select. 


Actions Answer Area 


Create a PST Import job 


Answer: Ka 


x 
Actions Answer Area 


Create a PST Import mapping file Install Copy 

Upload the PST files to Microsoft Office | Upload the PST files to Microsoft Office 
365 365 

Install Copy Create a PST Import mapping file 

Start the PST Import job Create a PST Import job 

Create a PST Import job Start the PST Import job 


Explanation: 
Graphical user interface, text, application 
Description automatically generated 


80.HOTSPOT 
Your company has an Exchange Online tenant. 
A partner company named Fourth Coffee also uses Exchange Online. 


You need to ensure that the users at your company share free busy information with 
the users at Fourth Coffee. The solution must ensure that the meeting details included 
in the calendars of your company users remain hidden from the Fourth Coffee users. 
How should you complete the command? To answer, select the appropriate options in 
the answer area. NOTE: Each correct selection is worth one point. 


W -Name “Fourth Coffee” -DomainNames “fourthcoffee.com” 
New-SharingPolicy 
New-AvailabilityConfig 
New-OrganizationRelationship 


-FreeBusyAccessEnabled Strue —FreeBusyAccessLevel W -FreeBusyAccessScope “Executives” 


None 
LimitedDetails 
AvailabilityOnly 
Ra 
Answer: S 


None 
LimitedDetails 
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